CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-102427 | CRITICAL | 10.0 | Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK < 8.3… | — |
|
2026-09-30 |
| CVE-2026-18782 | CRITICAL | 9.8 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability i… | — |
|
2026-09-30 |
| CVE-2026-103395 | CRITICAL | 9.8 | LightLLM through 1.2.0 visual_only deployments expose an unauthenticated RPyC service with allow_pic… | — |
|
2026-09-30 |
| CVE-2026-82307 | CRITICAL | 9.8 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability i… | — |
|
2026-09-30 |
| CVE-2026-97274 | CRITICAL | 9.8 | Unauthenticated Bypass Vulnerability in OAuth Single Sign On – SSO (OAuth Client) <= 7.1.2 versions. | — |
|
2026-09-30 |
| CVE-2026-97248 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Booking Activities <= 1.18.7.1 versions. | — |
|
2026-09-30 |
| CVE-2026-96822 | CRITICAL | 9.3 | Unauthenticated SQL Injection in Books Gallery <= 4.8.3 versions. |
T1190
T1005
+1
|
|
2026-09-30 |
| CVE-2026-96350 | CRITICAL | 9.8 | Subscriber Privilege Escalation in Estatik <= 4.3.5 versions. | — |
|
2026-09-30 |
| CVE-2026-96349 | CRITICAL | 10.0 | Unauthenticated Remote Code Execution (RCE) in SiteSkite <= 2.1.8 versions. | — |
|
2026-09-30 |
| CVE-2026-94389 | CRITICAL | 9.0 | Unauthenticated Remote Code Execution (RCE) in AcyMailing SMTP Newsletter <= 11.0.5 versions. | — |
|
2026-09-30 |
| CVE-2026-89238 | CRITICAL | 9.1 | WSS4J EncryptedHeader child confusion could promote an attacker-controlled plaintext element as the … | — |
|
2026-09-30 |
| CVE-2026-76504 | CRITICAL | 9.8 | A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager … |
T1078
T1548
|
|
2026-09-30 |
| CVE-2026-88920 | CRITICAL | 9.8 | An authentication bypass in the DOM security processor in Apache WSS4J allows unauthenticated remote… | — |
|
2026-09-30 |
| CVE-2026-87830 | CRITICAL | 9.1 | In the StAX streaming WS-SecurityPolicy validator, certain relative or unsupported XPath expressions… | — |
|
2026-09-30 |
| CVE-2026-94053 | CRITICAL | 9.1 | Authentication bypass via LDAP injection in component sshd-ldap in Apache MINA SSHD versions 1.2.0 t… | — |
|
2026-09-30 |
| CVE-2026-94052 | CRITICAL | 9.1 | A missing check in LdapPasswordAuthenticator in component sshd-ldap in Apache MINA SSHD versions 1.2… | — |
|
2026-09-30 |
| CVE-2026-77185 | CRITICAL | 9.1 | Authentication bypass in sshd-core in Apache MINA SSHD versions 2.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.… | — |
|
2026-09-30 |
| CVE-2026-102458 | CRITICAL | 9.8 | EasyFlow .NET developed by Digiwin has a Missing Authentication vulnerability. Unauthenticated remot… | — |
|
2026-09-30 |
| CVE-2026-102455 | CRITICAL | 9.8 | EasyFlow .NET developed by Digiwin has a Insecure Deserialization vulnerability. Unauthenticated rem… | — |
|
2026-09-30 |
| CVE-2026-97196 | CRITICAL | 9.1 | Improper Validation of Unsafe Equivalence in Input vulnerability in Liquid Web / StellarWP GiveWP al… | — |
|
2026-09-30 |